CVE-2026-12577 - Vulnerability Details - OpenCVE

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Deltaww	Dvp80es3

No data.

No data.

References

Link	Providers
https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf

History

Wed, 01 Jul 2026 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 01 Jul 2026 08:15:00 +0000

Type	Values Removed	Values Added
Description		DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.
Title		DVP80ES3 Improperly Implemented Security Check for Standard vulnerability
First Time appeared		Deltaww Deltaww dvp80es3
Weaknesses		CWE-358
CPEs		cpe:2.3:a:deltaww:dvp80es3::::::::
Vendors & Products		Deltaww Deltaww dvp80es3
References		https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf
Metrics		cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: Deltaww

Published: 2026-07-01T07:05:25.146Z

Updated: 2026-07-01T12:35:02.947Z

Reserved: 2026-06-18T05:22:55.191Z

Link: CVE-2026-12577

Vulnrichment

Updated: 2026-07-01T12:34:57.288Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-12577", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "state": "PUBLISHED", "assignerShortName": "Deltaww", "dateReserved": "2026-06-18T05:22:55.191Z", "datePublished": "2026-07-01T07:05:25.146Z", "dateUpdated": "2026-07-01T12:35:02.947Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2026-07-01T07:05:25.146Z"}, "title": "DVP80ES3 Improperly Implemented Security Check for Standard vulnerability", "datePublic": "2026-07-01T06:43:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-358", "description": "CWE-358: Improperly Implemented Security Check for Standard", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-596", "descriptions": [{"lang": "en", "value": "CAPEC-596: TCP RST Injection"}]}], "affected": [{"vendor": "deltaww", "product": "DVP80ES3", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.08.10", "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:deltaww:dvp80es3:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.08.10"}]}]}], "descriptions": [{"lang": "en", "value": "DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability."}]}], "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "solutions": [{"lang": "en", "value": "Users are recommended to update the device firmware to v01.10.00 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Users are recommended to update the device firmware to v01.10.00 or later."}]}], "credits": [{"lang": "en", "value": "Qian Zou, Ke Xu, Xuewei Feng, Qi Li, Xueying Li, and Gang Jin from Zhongguancun Laboratory", "type": "reporter"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-01T12:34:42.567445Z", "id": "CVE-2026-12577", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-01T12:35:02.947Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-12577", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-01T12:34:42.567445Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-01T12:34:57.288Z"}}], "cna": {"title": "DVP80ES3 Improperly Implemented Security Check for Standard vulnerability", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Qian Zou, Ke Xu, Xuewei Feng, Qi Li, Xueying Li, and Gang Jin from Zhongguancun Laboratory"}], "impacts": [{"capecId": "CAPEC-596", "descriptions": [{"lang": "en", "value": "CAPEC-596: TCP RST Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "deltaww", "product": "DVP80ES3", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.08.10"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Users are recommended to update the device firmware to v01.10.00 or later.", "supportingMedia": [{"type": "text/html", "value": "Users are recommended to update the device firmware to v01.10.00 or later.", "base64": false}]}], "datePublic": "2026-07-01T06:43:00.000Z", "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.", "supportingMedia": [{"type": "text/html", "value": "DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-358", "description": "CWE-358: Improperly Implemented Security Check for Standard"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:deltaww:dvp80es3:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.08.10", "versionStartIncluding": "0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2026-07-01T07:05:25.146Z"}}}, "cveMetadata": {"cveId": "CVE-2026-12577", "state": "PUBLISHED", "dateUpdated": "2026-07-01T12:35:02.947Z", "dateReserved": "2026-06-18T05:22:55.191Z", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "datePublished": "2026-07-01T07:05:25.146Z", "assignerShortName": "Deltaww"}, "dataVersion": "5.2"}